cveClient/encrypt-storage.js vulnerabilities
1 known vulnerability in cveClient/encrypt-storage.js from CERT/CC. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest first
- 7.5 High severity
cveClient/encrypt-storage.js: Insufficiently Protected Credentials
The stored API keys in temporary browser client is not marked as protected allowing for JavScript console or other errors to allow for extraction of the encryption credentials.